Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: TuRQvzRcWmRq0Adh79pwF9b6cbMiwLsGGNjSGQ9ZikM=
Subject key identifier: F3:FA:69:CF:C7:B6:95:73:C3:BB:4F:60:EA:EB:CA:FB:45:7F:6C:94
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 019655A5B61F12500D13BCCAA423F651677E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0AF1
Signing time: Mon 21 Apr 2025 00:00:45 +0000
Manifest this update: Mon 21 Apr 2025 00:00:45 +0000
Manifest next update: Tue 22 Apr 2025 00:00:45 +0000
Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: 0vum+NKS/66Vf0eF0WeEKKLgz0/0HMWtMvi4X595IO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:b6:1f:12:50:0d:13:bc:ca:a4:23:f6:51:67:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Apr 21 00:00:45 2025 GMT
Not After : Apr 22 00:00:45 2025 GMT
Subject: CN=f3fa69cfc7b69573c3bb4f60eaebcafb457f6c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:66:25:5b:7e:3b:df:99:d6:f0:74:9c:10:
53:d6:65:2f:91:53:f0:8a:a7:bc:c7:e8:77:5a:6a:
7d:96:7c:71:4d:2f:f5:d0:61:e7:18:6f:9d:76:c7:
f3:f6:b3:4b:fa:e9:26:9e:a5:09:35:a9:ec:72:a1:
dd:4a:e4:5f:90:55:44:50:72:aa:a8:69:a7:f3:20:
06:4e:f0:84:56:c4:cd:e6:20:7d:a9:69:12:f7:ef:
94:92:93:88:4b:31:83:ad:49:4c:ba:cd:46:d8:9c:
c6:d8:2e:f1:60:8a:cb:dc:bf:43:db:84:68:ba:61:
78:42:40:53:02:af:21:ed:86:6e:1b:e1:2d:70:7e:
43:1e:35:eb:51:35:07:a5:4e:ac:bf:5c:f1:91:59:
78:ca:d4:a7:b9:48:ba:fa:d9:a3:38:2f:69:01:ef:
5b:bd:67:16:f6:dc:24:bb:ed:b7:1a:27:98:9d:e3:
b8:28:ad:07:bd:21:51:fc:f3:d3:6a:11:c6:8e:61:
e1:04:eb:40:d3:f6:8f:38:ba:6f:81:59:a9:2e:e1:
41:91:92:47:44:a0:bd:a9:64:b2:0e:21:42:49:8b:
ad:8f:e5:cf:89:44:1d:08:80:bb:2b:27:22:df:50:
5a:35:57:f7:85:c8:a2:f1:b1:01:90:77:26:08:ee:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:69:CF:C7:B6:95:73:C3:BB:4F:60:EA:EB:CA:FB:45:7F:6C:94
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:ff:2f:ca:f3:e9:50:8e:bb:4c:17:33:0b:df:ae:35:27:
43:8c:ef:d9:b2:dd:aa:9f:90:c8:c5:b6:c5:4c:75:b6:69:5a:
f1:87:a7:ed:7a:b8:71:00:b3:16:a4:90:29:3e:6e:1d:67:5f:
90:3d:7e:73:7f:b5:ed:18:98:eb:cb:8b:ac:52:81:ec:03:4f:
6a:5e:ce:e5:e0:4f:a5:38:a2:2b:30:b0:42:81:1a:5c:23:8a:
15:27:89:5c:be:21:98:09:b2:48:1d:65:a4:bf:a8:51:63:b1:
3f:84:8a:10:12:d4:46:af:80:52:e5:0e:7b:81:a9:98:f8:de:
76:ad:8e:ef:5a:31:03:e6:cf:ef:5e:74:8a:25:14:7a:e6:67:
bd:ab:d2:01:d7:91:2e:9a:d5:02:6c:3c:f8:01:01:0d:0d:14:
54:a8:b2:1b:87:ab:e9:5a:28:16:31:0b:cd:33:fb:13:56:d3:
fd:f1:9c:56:b2:26:bc:fb:f4:a8:11:f4:2a:bf:b7:ef:5c:cb:
d8:e8:aa:55:2c:c8:45:4d:5a:e3:57:c5:ea:ed:90:3c:de:89:
f9:90:17:d6:6c:8d:53:69:51:71:86:7c:e0:d5:3e:b3:52:2c:
73:4a:01:cc:0a:78:ca:35:9e:ec:21:4f:88:fa:ef:d6:99:fd:
72:8a:1d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpbYfElANE7zKpCP2UWd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA5ZmVhODFlMzk4ZmVkOTMwNDlkZDdhMDA3ZWZkNjk3
MzU1NjMwHhcNMjUwNDIxMDAwMDQ1WhcNMjUwNDIyMDAwMDQ1WjAzMTEwLwYDVQQD
EyhmM2ZhNjljZmM3YjY5NTczYzNiYjRmNjBlYWViY2FmYjQ1N2Y2Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ5mJVt+O9+Z1vB0nBBT1mUvkVPw
iqe8x+h3Wmp9lnxxTS/10GHnGG+ddsfz9rNL+ukmnqUJNanscqHdSuRfkFVEUHKq
qGmn8yAGTvCEVsTN5iB9qWkS9++UkpOISzGDrUlMus1G2JzG2C7xYIrL3L9D24Ro
umF4QkBTAq8h7YZuG+EtcH5DHjXrUTUHpU6sv1zxkVl4ytSnuUi6+tmjOC9pAe9b
vWcW9twku+23GieYneO4KK0HvSFR/PPTahHGjmHhBOtA0/aPOLpvgVmpLuFBkZJH
RKC9qWSyDiFCSYutj+XPiUQdCIC7Kyci31BaNVf3hcii8bEBkHcmCO7TJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP6ac/HtpVzw7tPYOrryvtFf2yUMB8GA1UdIwQY
MBaAFH6Qn+qB45j+2TBJ3XoAfv1pc1VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYt
ODM3MDYzNzhjNTc2LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYtODM3MDYzNzhjNTc2
LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTX/L8rz
6VCOu0wXMwvfrjUnQ4zv2bLdqp+QyMW2xUx1tmla8Yen7Xq4cQCzFqSQKT5uHWdf
kD1+c3+17RiY68uLrFKB7ANPal7O5eBPpTiiKzCwQoEaXCOKFSeJXL4hmAmySB1l
pL+oUWOxP4SKEBLURq+AUuUOe4GpmPjedq2O71oxA+bP7150iiUUeuZnvavSAdeR
LprVAmw8+AEBDQ0UVKiyG4er6VooFjELzTP7E1bT/fGcVrImvPv0qBH0Kr+371zL
2OiqVSzIRU1a41fF6u2QPN6J+ZAX1myNU2lRcYZ84NU+s1Isc0oBzAp4yjWe7CFP
iPrv1pn9cooddQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:59 2025 by rpki-client